Porch Group Privacy Policy

Last Updated: November 23, 2022

Overview

This Privacy Policy describes how Porch Group, Inc. (“Porch,” “we,”) collects, uses, and shares information about you. This Privacy Policy applies to personal information we collect when you access or use our Investor Relations website at www.ir.porchgroup.com (the “Site”). If you do not agree with the terms of this Privacy Policy, please do not continue using the Services.

By "personal information," we mean information that uniquely identifies you, such as your name or email address. If information is de-linked or de-identified, we do not consider it to be personal information. For example, your address would not be personal information if it were included in a list of addresses without names or other unique identifiers.

References to Porch (or “we”) also include companies providing services to Porch, the Porch Family Companies, and our business partners, to the extent that such parties are collecting, using, or sharing personal information for or on behalf of Porch. This Privacy Policy applies to information collected by those companies only when they provide it to Porch.

We may change this Privacy Policy from time to time. If we make changes, we will notify you by posting the updated Privacy Policy on our website and updating the effective date at the top of this Privacy Policy.

Information We Collect

Information You Give to Us

You can visit the Site as a casual browser without providing personal information.

We collect your personal information when you subscribe to the Investor email alerts through the Site. In addition, we will collect and use your personal information at any time and from time to time (including but not limited to) only where we have legitimate business reasons and are legally entitled to do so, or when it is required to verify your personal information by us or our service providers for the following situations:

• when you request for services or technical support;

• when you report a problem or make any inquiries or suggestions in respect of the Site; or

• when you contact us, we may keep a record of that correspondence.

Information We Collect Automatically

When you access or use the Sites or when we send you emails, we may use tracking technologies to automatically collect information about you.  Please see our Cookie Policy to learn more about these technologies, how we use them, and how to manage or disable them. Automatically collected information may be associated with your unique browser, device identifier or Internet protocol (IP) address, but we do not consider it to be personal information unless it is linked to your unique identifier(s).  

 Automatically collected information includes:

• Log Information. We log information such as IP address, access times, operating system, browser type and language, Internet service provider (ISP), and the web page you visited before navigating to our Services.

• Usage and Session Information. We collect usage information, such as how many visitors visit a specific page, how long they stay, which links they click on, and how, when and how often they order particular services, and session information, such as mouse actions, pages visited, screen actions and other interaction patterns.

• Device Information. We collect information about the computer or mobile device you use to access our Services, including the hardware model, operating system and version, unique device identifiers and mobile network information.

• Location Data. If you are using mobile Services, we may collect location data directly from your mobile device if your device allows us to do so. In addition, your IP address may provide an approximate geo-location.

• Transaction Information. When you purchase a service, we collect information about the transaction, such as the date and location of the purchase.

• Emails. When you receive emails from us, we collect information about whether and when you opened the email, whether you clicked on the images and links in the email, and whether your computer or mobile device is capable of receiving HTML-based email.

Categories of Personal Information Collected

In the last 12 months, Porch has collected the following categories of personal information from the categories of sources described above. We consider this information to be personal information to the extent that it is information that uniquely identifies you, is unique financial information, or is linked to your unique identifier(s), or if it is defined as personal information by applicable state law.

How We Use the Information We Collect

In general, we use the information we collect to operate our business, including:

• To provide, maintain, improve and personalize the Site and the services of other Porch Family Companies.

• To detect, investigate and address technical issues, security incidents, fraudulent transactions, abuse, violations of our agreements and policies, and illegal activities.

• To comply with our legal obligations and legal process.

• To create aggregated or de-identified data sets.

• To carry out certain short-term activities and other reasonable internal purposes related to the Services, the products or services you purchase through us or your ongoing relationship with us.

• To perform other business purposes described at the time the information is collected or as otherwise set forth in applicable data privacy laws.

Porch will not collect additional categories of personal information or use the personal information we collect for materially different, unrelated, or incompatible purposes without providing you notice.

How We Share Information

Except as described in this Privacy Policy, we do not sell or rent your personal to any third party. If we share your personal information, we do so only as follows:

Porch Family Companies

We share information with Porch Family Companies for marketing purposes, to allow them to improve their products and services (such as confirming or supplementing information they have about a consumer or to classify a consumer as a mover), in connection with the data, technical, legal, accounting, and other  services shared between the Porch Family Companies, and for other internal business purposes. The Porch Family Companies will be bound by the terms of this Privacy Policy with respect to personal information received from Porch and will use that personal information only as described in this Privacy Policy.

Companies Providing Services to Porch

We share information with third-party vendors, consultants, and other service providers that are providing business services to Porch. For instance, we may share information about you with a third-party service provider that hosts Site, sends out emails, or monitors or analyzes Sites data. Such companies will have access to your personal information only as necessary to carry out their work and are prohibited from using it for any other purpose.

Compliance with Laws and Policies; Protection of Rights

We may disclose your personal information if we believe disclosure is necessary to comply with any applicable law, regulation, or legal process, to cooperate with government or law enforcement, or to avoid legal liability; to resolve complaints or disputes; to investigate and resolve technical issues, security incidents, fraud, abuse, and illegal activities; if we believe your actions are inconsistent with the spirit or language of our user agreements or policies; or to protect the rights, reputation, safety and property of Porch or others.

Categories of Personal Information Disclosed

In the last 12 months, Porch has disclosed the following categories of personal information for a business purpose to the following categories of third parties:

Security

We take reasonable measures, including administrative, technical, and physical safeguards, to restrict access to your personal information and help protect it from loss, theft, misuse, and unauthorized access, disclosure, alteration, and destruction.  However, no such measure is 100% secure.

Third-Party Websites or Services

The Porch website may contain links to other third-party websites and services, either directly or through advertisements on Porch’s website.  Porch is not responsible for the content or privacy practices of websites operated by third parties, including our advertising partners and networks.  We encourage you to review the privacy policies of third-party websites and services before providing any information to them.

Managing Your Personal Information

Cookies

Most web browsers are set to accept cookies by default. If you prefer, you can usually choose to set your browser to remove or reject browser cookies. Please note that if you choose to remove or reject cookies, this could affect the availability and functionality of the Services.

To opt out of being tracked by Google Analytics when using our web-based services, visit https://tools.google.com/dlpage/gaoptout.

Promotional Communications

Receiving emails from Porch is completely voluntary, and you may opt out at any time. To opt out of communications from Porch, you can contact or email questions@porch.com. You can also opt out of receiving promotional emails by clicking the unsubscribe link in the email. You may receive a final email or text message confirming your opt-out. Please allow up to 10 business days to process any opt-out request.

Please note that even if you opt out, we may still send you non-promotional communications, such as emails about site outages, your online account or service requests that you have submitted.

Children and Our Services

Our Services are not directed to children, and you may not use our Services if you are under the age of 16. If we learn that we have collected personal information of a child under 16, we will make commercially reasonable efforts to delete such information from our files.

State-Specific Rights

Your California Resident Privacy Rights

Under the California Consumer Privacy Act or CCPA, California residents have certain rights regarding their data, including:

• The right to know the categories of personal information we’ve collected and the categories of sources from which we got the information (see Information We Collect);

• The right to know the business purposes for which we’ve shared personal information (see How We Use Information We Collect);

• The right to know the categories of third parties with whom we’ve shared personal information (see How We Share Information We Collect);

• The right to access the specific pieces of personal information we’ve collected and to request that we delete personal information, subject to certain exceptions (see below);

• The right to opt out of the sale of personal information (see below); and

• The right to not be discriminated against for exercising CCPA privacy rights.

For purposes of these rights, “sold” and “business purpose” have the meanings given in the CCPA. For example, if you submit an opt-out request, you will not be opted out from transactions that the CCPA does not deem to be sales. In addition, please note that the CCPA does not require us to delete personal information that we need to maintain for certain purposes.

• To exercise the access and deletion rights described above, you may submit a verifiable consumer request to us by either:

• Calling us toll free at (855) 976-3138; or

• Visiting our webpage at porch.com/about/privacy/ccpadatarequest

Only you, or someone that you authorize to act on your behalf may make a verifiable consumer request related to your personal information. We will work to respond to your request within 15 business days (for opt-out requests) or 45 calendar days(for deletion and access requests) of receipt. We will not charge you a fee for making a request unless your request is excessive, repetitive, or manifestly unfounded. If we determine that your request warrants a fee, we will notify you and explain our decision before completing your request.

Your Nevada Resident Privacy Rights

If you are a resident of Nevada, you have the right to opt out of the sale of certain kinds of personal information (such as name, physical address, email address, telephone number and other personal  information collected through a website) to purchasers that will then license or sell the covered information to additional persons. You can exercise this right by emailing us at questions@porch.com with the subject line “Nevada Do Not Sell Request.” Nevada law specifies various transactions that are excluded from the definition of “sale”; if you exercise this opt-out right, you will not be opted out from transactions that the law does not deem to be sales.

Retention

Porch retains personal information as long as it is needed for business or legal purposes.

Governing Law; Visitors Residing Outside the United States 

Porch’s website and services are hosted and performed in the United States. This Privacy Policy is subject the laws of the United States of America and the State of Washington, without regard to conflict of law principles. If you reside outside of the United States, you are responsible for complying with local laws in connection with your use of the Services, and you consent to the collection, transfer, storage, and use of your personal information in the United States in accordance with this Privacy Policy.

The laws governing processing of personal information vary depending on the jurisdiction in which you reside. To the extent the laws of your jurisdiction are more restrictive than the terms of this Privacy Policy, it is Porch’s policy to follow the requirements of those laws to the extent those laws are applicable to Porch’s activities or your personal information.

Additional Information or Assistance

Please address comments or questions to questions@porch.com or write to us at the address below.

Porch.com, Inc.
Attn: Privacy Policy
411 1st Ave S., Ste. 501
Seattle, WA 98104